|
Plagegeister aller Art und deren Bekämpfung: Hilfe Bitte!?!Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
23.11.2005, 15:25 | #1 |
| Hilfe Bitte!?! Hi ich bin Tobias noch etwas jung und hab mir diesen Virus eingefangen TR/Dldr.Dyfuca.ds bei Systemstart greift mein AntiVir gleich ein kann ihn nach dem fünften mal löschen aber beim nächsten mal kommt die meldung wieder hab ne Hijack loglist gemacht Logfile of HijackThis v1.99.1 Scan saved at 15:07:42, on 23.11.2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE C:\Programme\AVPersonal\AVWUPSRV.EXE C:\WINDOWS\system32\Ati2evxx.exe C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\NVATray.exe C:\Programme\D-Tools\daemon.exe C:\Programme\Java\jre1.5.0_04\bin\jusched.exe C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Programme\AVPersonal\AVGNT.EXE C:\Programme\QuickTime\qttask.exe C:\WINDOWS\Mixer.exe C:\Programme\Logitech\MouseWare\system\em_exec.exe C:\programme\180search assistant\180sa.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ctfmon.exe C:\Programme\Messenger\msmsgs.exe C:\PROGRA~1\ezula\mmod.exe C:\Programme\FRITZ!\IWatch.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE C:\Program Files\Media Access\MediaAccess.exe C:\Programme\ICQLite\ICQLite.exe C:\Programme\Internet Explorer\iexplore.exe C:\Programme\GetRight\GETRIGHT.EXE C:\Programme\GetRight\GETRIGHT.EXE C:\Programme\Internet Explorer\iexplore.exe C:\Downloads\HijackThis.exe C:\Program Files\Media Access\MediaAccK.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.accoona.com/search_assistant/accoona_search_assistant.jsp?&utm_id=400010&utm_content=leftnav&utm_source=efc&utm_medium=bund&utm_campaign=efc0605 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.accoona.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.accoona.com/search_assistant/accoona_search_assistant.jsp?&utm_id=400010&utm_content=leftnav&utm_source=efc&utm_medium=bund&utm_campaign=efc0605 F3 - REG:win.ini: run= O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: www.googl.at O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: googl.at O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: www.googl.ch O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: googl.ch O1 - Hosts: <HTML><HEAD> O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Programme\GetRight\xx2gr.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NVIDIA nForce APU1 Utilities] NVATray.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programme\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [AceGain LiveUpdate] C:\Programme\AceGain\LiveUpdate\LiveUpdate.exe O4 - HKLM\..\Run: [ATIPTA] "C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [AVGCtrl] "C:\Programme\AVPersonal\AVGNT.EXE" /min O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [BearShare] "C:\Programme\BearShare\BearShare.exe" /pause O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup O4 - HKLM\..\Run: [shell32] C:\WINDOWS\system32\wuauclt10.exe O4 - HKLM\..\Run: [Client Server Runtime Process] C:\WINDOWS\system32\smmss.exe O4 - HKLM\..\Run: [Windows update] C:\WINDOWS\system32\wudupdate.exe O4 - HKLM\..\Run: [I downloaded pirated Software from P2P and now I post my Hijack log whining] C:\WINDOWS\system32\NBA Live 2006 crack.exe O4 - HKLM\..\Run: [180sa] c:\programme\180search assistant\180sa.exe O4 - HKLM\..\Run: [ngrarih] C:\WINDOWS\ngrarih.exe O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [eZmmod] C:\PROGRA~1\ezula\mmod.exe O4 - HKCU\..\RunOnce: [Web Offer] C:\WINDOWS\system32\smmss.exe O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE O4 - Global Startup: ISDNWatch.lnk = C:\Programme\FRITZ!\IWatch.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: Download with GetRight - C:\Programme\GetRight\GRdownload.htm O8 - Extra context menu item: Open with GetRight Browser - C:\Programme\GetRight\GRbrowse.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O12 - Plugin for .pdf: C:\Programme\Internet Explorer\PLUGINS\nppdf32.dll O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O16 - DPF: {FB48C7B0-EB66-4BE6-A1C5-9DDF3C37249A} (MCSendMessageHandler Class) - http://xtraz.icq.com/xtraz/activex/MISBH.cab O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\PROGRAMME\FRITZ!\de_serv.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\SAgent2.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe Bitte helft mir ich bin nämlich noch neuling in der Vieren abteilung hatte noch kein Vir also schon mal danke im Voraus gru? Tobi |
23.11.2005, 15:38 | #2 | |
| Hilfe Bitte!?! Servus!
__________________Zusätzlich zu einem ganzen Zoo von Spy/Adware hast Du hier Zitat:
Da kann ich Dir nur noch das http://www.trojaner-board.de/showthread.php?t=12154 empfehlen! Hier ist auch verlinkt, warum das die einzig sinnvolle Lösung ist! stupormundi
__________________ |
23.11.2005, 16:13 | #3 |
| Hilfe Bitte!?! hab nochmal nen neustart gemacht da ich ein paar sachen gelöscht hab und jetzt sieht es so aus gibt es keinen anderen auswag auser formatieren das wär nämlich richtig blöd +
__________________Logfile of HijackThis v1.99.1 Scan saved at 16:11:37, on 23.11.2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE C:\Programme\AVPersonal\AVWUPSRV.EXE C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\NVATray.exe C:\Programme\D-Tools\daemon.exe C:\Programme\Java\jre1.5.0_04\bin\jusched.exe C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Programme\AVPersonal\AVGNT.EXE C:\Programme\QuickTime\qttask.exe C:\WINDOWS\Mixer.exe C:\programme\180search assistant\180sa.exe C:\Programme\Logitech\MouseWare\system\em_exec.exe C:\WINDOWS\system32\ctfmon.exe C:\Programme\Messenger\msmsgs.exe C:\PROGRA~1\ezula\mmod.exe C:\WINDOWS\System32\svchost.exe C:\Programme\FRITZ!\IWatch.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE C:\Program Files\Media Access\MediaAccess.exe C:\Program Files\Media Access\MediaAccK.exe C:\Program Files\Internet Optimizer\optimize.exe C:\Downloads\HijackThis.exe C:\Programme\Internet Explorer\iexplore.exe C:\Programme\GetRight\GETRIGHT.EXE C:\Programme\GetRight\GETRIGHT.EXE R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.accoona.com/search_assistant/accoona_search_assistant.jsp?&utm_id=400010&utm_content=leftnav&utm_source=efc&utm_medium=bund&utm_campaign=efc0605 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.accoona.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.accoona.com/search_assistant/accoona_search_assistant.jsp?&utm_id=400010&utm_content=leftnav&utm_source=efc&utm_medium=bund&utm_campaign=efc0605 R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file) F3 - REG:win.ini: run= O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: www.googl.at O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: googl.at O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O1 - Hosts: <H1>Not Found</H1> O1 - Hosts: The requested URL /ip.txt was not found on this server.<P> O1 - Hosts: </BODY></HTML> O1 - Hosts: <HTML><HEAD> O1 - Hosts: <TITLE>404 Not Found</TITLE> O1 - Hosts: </HEAD><BODY> O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SABHO - {21B4ACC4-8874-4AEC-AEAC-F567A249B4D4} - c:\programme\180search assistant\180sahook.dll O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Programme\GetRight\xx2gr.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NVIDIA nForce APU1 Utilities] NVATray.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programme\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [AceGain LiveUpdate] C:\Programme\AceGain\LiveUpdate\LiveUpdate.exe O4 - HKLM\..\Run: [ATIPTA] "C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [AVGCtrl] "C:\Programme\AVPersonal\AVGNT.EXE" /min O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [BearShare] "C:\Programme\BearShare\BearShare.exe" /pause O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup O4 - HKLM\..\Run: [shell32] C:\WINDOWS\system32\wuauclt10.exe O4 - HKLM\..\Run: [Client Server Runtime Process] C:\WINDOWS\system32\smmss.exe O4 - HKLM\..\Run: [Windows update] C:\WINDOWS\system32\wudupdate.exe O4 - HKLM\..\Run: [I downloaded pirated Software from P2P and now I post my Hijack log whining] C:\WINDOWS\system32\NBA Live 2006 crack.exe O4 - HKLM\..\Run: [180sa] c:\programme\180search assistant\180sa.exe O4 - HKLM\..\Run: [mxml] C:\WINDOWS\mxml.exe O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [eZmmod] C:\PROGRA~1\ezula\mmod.exe O4 - HKCU\..\RunOnce: [Web Offer] C:\WINDOWS\system32\smmss.exe O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE O4 - Global Startup: ISDNWatch.lnk = C:\Programme\FRITZ!\IWatch.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: Download with GetRight - C:\Programme\GetRight\GRdownload.htm O8 - Extra context menu item: Open with GetRight Browser - C:\Programme\GetRight\GRbrowse.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O12 - Plugin for .pdf: C:\Programme\Internet Explorer\PLUGINS\nppdf32.dll O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O16 - DPF: {FB48C7B0-EB66-4BE6-A1C5-9DDF3C37249A} (MCSendMessageHandler Class) - http://xtraz.icq.com/xtraz/activex/MISBH.cab O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\PROGRAMME\FRITZ!\de_serv.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\SAgent2.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe |
24.11.2005, 06:31 | #4 | ||
| Hilfe Bitte!?! Servus! Zitat:
Zitat:
stupormundi
__________________ Unsichtbare Dateien suchen: Sehr gute Anleitung von Rene-gad: WICHTIG: Alle aktiven links editieren (http-->h**p) und persönliche Informationen aus den Logfiles entfernen Kein Support via PN - sorry! |
Themen zu Hilfe Bitte!?! |
adobe, adobe reader, antivir, bho, browser, danke, dateien, drivers, explorer, fritz!, google, heulen, hijack, hijackthis, hotkey, html, icqtoolbar, internet, internet explorer, löschen, microsoft, monitor, nvidia, object, programme, rundll, shockwave, software, virus, virus eingefangen, windows, windows xp, wuauclt |